Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TD4KUrPLqzf5U_MuRlOT6yFGis8.roa
File: TD4KUrPLqzf5U_MuRlOT6yFGis8.roa (raw, json)
Hash identifier: f/PVm971QppM6JTgIWxITxU77noi6AxWohWuFgyHUh8=
Subject key identifier: 4C:3E:0A:52:B3:CB:AB:37:F9:53:F3:2E:46:53:93:EB:21:46:8A:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1649
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TD4KUrPLqzf5U_MuRlOT6yFGis8.roa
Signing time: Sun 07 Feb 2021 12:09:28 +0000
ROA not before: Sun 07 Feb 2021 12:09:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5705 (0x1649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C3E0A52B3CBAB37F953F32E465393EB21468ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:b4:29:d4:55:0b:d9:df:78:10:4c:e1:41:
87:6d:2c:b8:a5:61:6e:1e:c7:15:58:a4:75:dd:bb:
16:63:8a:79:3c:ba:8d:71:a9:a1:58:c8:0d:54:c3:
dd:a5:ea:6f:e3:40:31:38:96:1e:d8:bd:4b:69:fa:
ff:54:3a:51:a4:4f:38:5a:25:78:7a:7d:f7:4f:e8:
c1:0d:a7:f7:60:f8:47:05:ae:70:7a:a3:e7:1b:93:
83:c9:5f:8e:4e:86:d8:59:61:38:11:c3:39:6d:af:
f9:a4:57:cd:01:4f:76:19:2d:fc:db:83:98:74:e7:
e4:c4:98:63:4f:34:da:a4:96:dc:bd:ce:c7:6a:03:
d3:ff:92:96:99:5c:e8:f0:59:2c:22:9f:1f:56:e6:
c0:3d:c7:6c:bd:a5:5e:90:ae:34:ed:dc:ca:8f:55:
e2:bf:d5:86:9b:d6:34:3e:0b:73:6b:60:1c:18:48:
3d:55:8c:98:df:0e:7a:a6:31:af:37:7b:94:da:46:
23:dd:0e:d4:46:4b:01:3e:e9:79:01:21:9e:91:9f:
22:9c:94:05:01:5c:a7:48:cd:14:b0:a3:62:f7:29:
ef:2f:82:a9:74:e7:6b:99:5a:d1:01:7f:07:d0:fa:
a0:5d:69:41:ad:3f:bd:7f:c0:8c:43:9a:2e:f0:6a:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:0A:52:B3:CB:AB:37:F9:53:F3:2E:46:53:93:EB:21:46:8A:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TD4KUrPLqzf5U_MuRlOT6yFGis8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
41:ca:34:d9:72:4f:47:aa:9c:b2:07:99:dd:cd:34:aa:f0:05:
9d:63:53:a9:35:0a:0f:39:34:37:9e:80:1f:05:79:d2:05:af:
cb:59:6a:84:1f:9f:ef:59:7c:f7:c8:d0:bb:94:58:41:47:7b:
88:33:c5:58:ab:a3:da:cd:f9:14:54:f3:0f:65:70:a0:eb:9e:
83:b4:f8:31:02:ba:b7:97:dc:22:11:e5:f8:87:60:73:a4:2c:
64:d8:d2:2d:79:19:d7:9e:90:f2:1f:e7:60:ea:f9:69:5b:a5:
f2:96:2e:16:84:16:bc:fe:e2:2f:83:4a:48:84:84:0b:a4:40:
38:ae:ef:7e:97:f1:3f:0c:53:28:71:c3:2b:4b:f1:da:01:58:
bb:2d:4c:b5:e5:64:d8:6b:92:df:2d:73:0c:c5:e9:73:b6:b0:
b3:68:84:ce:f8:4b:06:09:52:e1:cd:23:9d:6a:a7:af:4c:63:
c7:75:73:3e:7f:0b:12:db:41:34:ad:76:6a:56:f2:3c:ca:02:
6c:42:92:aa:cf:e9:0a:ea:69:88:02:b4:d7:d1:8d:ce:0f:91:
51:e1:51:01:f8:f9:8e:45:8a:12:18:c1:e1:b6:0d:41:02:d7:
89:dd:06:8b:df:9c:0a:9c:4f:ae:76:ec:cb:f2:a6:b0:35:e1:
4b:5b:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org